CVE-2024-38620
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Remove HCI_AMP support Since BT_HS has been remove HCI_AMP controllers no longer has any use so remove it along with the capability of creating AMP controllers.
Does this matter?
Lower severity and a low EPSS score (0.31%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Remove HCI_AMP support Since BT_HS has been remove HCI_AMP controllers no longer has any use so remove it along with the capability of creating AMP controllers. Since we no longer need to differentiate between AMP and Primary controllers, as only HCI_PRIMARY is left, this also remove hdev->dev_type altogether.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.31% probability · 23th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/5af2e235b0d5b797e9531a00c50058319130e156Patch
- https://git.kernel.org/stable/c/84a4bb6548a29326564f0e659fb8064503ecc1c7Patch
- https://git.kernel.org/stable/c/9e6cf0eccfe15b67bf9773ecd101162dfdfed5e2
- https://git.kernel.org/stable/c/af1d425b6dc67cd67809f835dd7afb6be4d43e03Patch
- https://git.kernel.org/stable/c/d3c7b012d912b31ad23b9349c0e499d6dddd48ecPatch
- https://git.kernel.org/stable/c/5af2e235b0d5b797e9531a00c50058319130e156Patch
- https://git.kernel.org/stable/c/84a4bb6548a29326564f0e659fb8064503ecc1c7Patch
- https://git.kernel.org/stable/c/af1d425b6dc67cd67809f835dd7afb6be4d43e03Patch
- https://git.kernel.org/stable/c/d3c7b012d912b31ad23b9349c0e499d6dddd48ecPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.